- Author
- Insider Mini
- 1 reply
-
1 month ago
SOLVED — Blade 16 (2023) RZ09-0483 stuck in Deployed Mode after BIOS 2.05 update — full recovery, no repair needed
For anyone stuck with "Secure Boot Violation – Invalid signature detected" after the official BIOS 2.05 update (AMI 2.22.1287), with Secure Boot locked to Enabled, System Mode: Deployed, and no Key Management / Restore Factory Keys options — here is what actually worked for me:
WHAT DID NOT WORK:
- 30-second power drain (power button held with AC disconnected) — did NOT clear the locked state
- Restore Defaults (F3) + Save & Exit — no change
- Booting a current Windows 11 USB installer — rejected with the same Secure Boot Violation
- The official securebootrecovery.efi workaround (article 20795) — not applicable at this stage, because it requires disabling Secure Boot first, and the toggle was locked
USEFUL DIAGNOSTIC:
- A Linux USB (Ubuntu/Bazzite — shim bootloader signed with the Microsoft 3rd Party UEFI CA certificate) BOOTED SUCCESSFULLY while every Windows bootloader was rejected. This confirms the corruption only affects the Microsoft Windows Production CA entry in the firmware db, while the third-party CA entry stays intact. Linux is also a lifeline for accessing your data while the machine can't boot Windows.
WHAT ACTUALLY UNLOCKED THE BIOS:
1. Opened the bottom panel (Torx T5), disconnected the main battery, and REMOVED THE CMOS COIN CELL BATTERY for a few minutes. A simple power drain does NOT clear the corrupted NVRAM — physically removing the coin cell does.
2. Additionally, I changed the GPU mode from Discrete (dGPU-only) to Hybrid in the BIOS Advanced settings, which forces a full firmware configuration rewrite on save.
3. After reconnecting everything and rebooting into BIOS: the Secure Boot toggle was EDITABLE again (Deployed lock cleared).
FULL RECOVERY STEPS FROM THERE:
4. Disabled Secure Boot → Windows booted normally again (data intact).
5. Ran Windows Update completely.
6. Followed the official recovery procedure (article 20795): copied C:\windows\boot\efi\securebootrecovery.efi to a FAT32 USB as \EFI\BOOT\bootx64.efi (md D:\EFI\BOOT + copy command from admin CMD).
7. Re-enabled Secure Boot in BIOS → rebooted → F12 → booted from the USB → the recovery tool re-provisioned the Secure Boot keys.
8. Result: Windows boots normally with Secure Boot ON (msinfo32 shows "Secure Boot State: On"). Fully restored, no hardware repair needed.
Context: the BIOS update was prompted by Razer Synapse itself (required for the CPU Voltage Optimizer feature), so this defect is triggered by following Razer's own official update path. Support case ref: 260801-001325.
Hope this saves someone's machine — this exact issue is affecting multiple Blade 15/16/18 units on BIOS 2.03–2.05.